View Single Post
Old 04-15-2006, 09:19 PM   #3 (permalink)
MicroBell
Monster Techie
 
Join Date: Oct 2002
Posts: 1,134
Default

Please post a hijackthis log in the hijackthis forum. A total format gets rid of this virus. If you got it again...then your either connecting to another networked PC thats infected...or your connecting back to the internet before apply the microsoft patch the fixes the Buffer Overrun In RPC Interface this worm uses.

*Note* You can also get reinfected if you have more then one partiton or harddrive and it has the infected files.

This must be patched...prior to connecting to the internet..otherwise the worm reinstalls..

http://www.microsoft.com/technet/sec.../MS03-026.mspx

I would suggest doing things in this order...

1. Install the Patch and a firewall (Update Windows XP also)
2. Run VCleaner again
3. Post a hijackthis log so I can see if the core virus files are still running.

Here's some more info....http://www.dslreports.com/forum/rema...ilite=gaelicum

This is a nasty worm...and you need to patch and firewall the system prior to cleaning it. And if your userinit.exe file is infected...it would be quicker to format....reinstall...update..then clean the system...as each time userinit.exe runs..it reinfects the system...so you will need to replace the file with a clean version.
__________________
We Are The BORG Spyware KILLER and Adware Destroyer!


Spyware/Adware Remover Downloads
Hijackthis
Ad-aware SE
Spybot Search&Destroy
SpywareBlaster
CWShredder
MicroBell is offline   Reply With Quote